In our company, we have had some problems with the solution's ACL since it has some rules that don't work correctly. We have grouped some objects under one class, and we use it in ACL, but it still doesn't work correctly. ACL is an area with shortcomings that needs to be improved.
Solution Consultant at 1&1 Versatel Deutschland GmbH
MSP
Top 5
2023-03-09T22:01:00Z
Mar 9, 2023
Fortinet should simplify the licensing model. It's too complex for decision-makers to choose from the range of options. Handling the pricing models is a nightmare, so it's difficult to sell the solution.
Key Account Manager at a tech consulting company with 11-50 employees
Real User
Top 20
2022-10-13T16:30:14Z
Oct 13, 2022
The console or demonstration tool could be more user friendly. Better marketing is needed to elevate the solution. The solution partners with many vendors but some of them do not want to help or share information that would ensure good integrations. The EDR could use improvement to be more robust and in line with Darktrace.
IT Security Senior Manager at American University in Cairo (AUC)
Real User
Top 20
2022-09-26T11:29:04Z
Sep 26, 2022
The solution should include a commit button that allows for review of changes and deployments before they are submitted. Any actions are immediately reflected but it would be better if a review-before-commit option existed like with Palo Alto. The solution could enhance its firewall reporting without the need for a sister product such as Analyzer.
Sr. Security Operations Engineer at a tech services company with 51-200 employees
Real User
Top 10
2022-07-18T07:38:56Z
Jul 18, 2022
There is room for improvement in their management and downtime. They're constantly doing maintenance and there are unexpected downtimes for the cloud interface. It seems like they are having some growing pains.
GUI access could be improved. It should be simpler to access everything from the portal. Once we log in to the portal, we should be able to access all the Fortinet Cloud options. Onboarding and activating customers in FortiGate Cloud is also tricky. They will come to us asking for help and telling us they can't find the activation. Maybe Fortinet could add something like a wizard that provides step-by-step guidance about what to do next. If I am using this solution for the first time, so I do not know where to click. There should be built-in guided instructions inside the portal itself.
Assistant Manager at Metro Infrasys Private Limited
Real User
Top 20
2022-05-29T13:02:00Z
May 29, 2022
It would be better for us if Fortinet provided a private cloud, and they should provide more security on the public cloud. There are some minor issues with security with the public cloud. For example, anyone with a link can access the public cloud.
System Administrator & IT Specialist at Informat Systems
Real User
Top 10
2022-05-18T09:27:10Z
May 18, 2022
The licensing is a little bit confusing and needs to be improved. The technical support should be more responsive. I would like to see support for a cloud-based network access control (NAC) platform.
When we're upgrading, it's sometimes quite challenging, especially firmware. We usually don't upgrade unless we have a bug, and we still feel it's not safe to react instead of being proactive. We often have some delays when updating FortiGuard, too. Nevertheless, I believe that it's okay most of the time with proper management. We also run into some problems using FortiGate as a UTM solution. I feel like maybe they're not giving me a full view of the other components that they have in that box. Their box has some DDoS defense, but I need complete DDoS protection. I must not have light DDoS protection on other UTM boxes because if I'm uncertain about the security posture, it will compromise me. We like having everything in one box because running multiple boxes eats up more resources on the computing level. We need a total solution, not half-half.
Technical Head at MICROLOGIC NETWORKS PRIVATE LIMITED
Real User
2021-12-27T19:20:45Z
Dec 27, 2021
The solution could add load balancing and QS features at an application level. In Fortinet, they don't have application-level visibility as we have in Palo Alto. That is something Fortinet can improve on, the application-level visibility. The SSL visibility could be better. The content which is encrypted, if they can add an encryption engine, which can check the traffic of SCTPS and do the analysis and the threat filtering, or the URL filtering, in the content, that would be ideal. That way, we don't have to purchase another separate product, like Content Peeper, or other products that do dedicated SSL filtering. I'd like application-side reporting, for example, who are the top 10 users, what users are using what. In terms of the complexity, if they integrate and give the track-to reporting to management, that will be a great feature for a future release.
Specialist at a comms service provider with 11-50 employees
Real User
Top 20
2021-11-20T07:30:11Z
Nov 20, 2021
We have found that the antivirus functions are very bad in Fortinet FortiGate Cloud and we don't use the antivirus anymore. Additionally, the FortiADC has bad quality. The solution could improve by having a Russian interface.
Senior Security Architect for Medical Devices at a pharma/biotech company with 10,001+ employees
Real User
2021-08-11T14:02:54Z
Aug 11, 2021
The support is not very good and is something they need to work on. I do not find them to be very helpful. As with any IT vendor, there are software issues.
I'd like to see some configuration changes. The speed seems to be a little better than it was previously but it could still be improved. I'd also like to see a little more provisioning or training on the different scenarios and functions and features. And obviously the price point; it's a tough market out there these days, so for some of our smaller customers the price is quite steep.
Chief Operating Officer at a tech services company with 11-50 employees
Real User
2021-01-13T01:52:04Z
Jan 13, 2021
Currently with the solution, if you want to manage more than one FortiGate you have to use a VM, and a VM can control up to 10. You need to have a license for each one and it is confusing. Other solutions like Meraki is much more seamless. Easier usability and improving their WebDewey would benefit also.
CEO at a tech services company with 51-200 employees
Reseller
2021-01-08T15:59:23Z
Jan 8, 2021
The integration could be better on the solution. As it is now, there's definitely room for improvement. The command-line interface could definitely be improved in future iterations. It's lacking right now.
Founder at a marketing services firm with 11-50 employees
Real User
2020-09-10T07:35:42Z
Sep 10, 2020
The initial set up could be simplified. When evaluating other solutions, I learned that Sophos for example is able to have the endpoint interact with the firewall. If something goes wrong or if the endpoint is not behaving as it should, it could isolate the endpoint. We need some integration or communication between the endpoint and the firewall. I would also like to have a bundle available that would include things like EDR and endpoint.
Reporting is an area that can be enhanced. It is not always beneficial, and you have to buy an additional license to get the type of reports that you're looking for. There are often releases of the new firmware, which requires upgrades often. This is an inconvenience for customers as they have to have a maintenance window and turn off the internet until the upgrade is complete. In the future, they could integrate with a third-party reporting tool such as Crystal Reports or Power BI, which might be beneficial, as it currently requires an additional license.
When it comes to the overall product, I don't see places for improvement. It's excellent. The cost of the solution is too high. It should be adjusted to be more affordable for companies. Right now, I feel like it's far too much.
Information Technology Assistant at a manufacturing company
Real User
2020-02-23T06:17:03Z
Feb 23, 2020
The solution should allow users to keep the data for longer than the current periods. I can't get any historic data after more than a month. I would like to be able to, after a year, look for trends from the past 12 months. It would make things much easier.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
Consultant
2019-12-31T09:39:00Z
Dec 31, 2019
I would like to see a SIEM bundled together with this because customers are looking into better reporting and more proactive security solutions. In the next release, it would benefit this solution to have more advanced monitoring capabilities such as predictive analysis and reporting.
When you login to Forticloud you get directed to the Global site, even if you are based in Europe and you have to switch manually to the European site which can be confusing when you are not familiar to Forticloud, especially in the beginning and when you want to setup your first device. This should be more like a question when you log in, are you based in the US or are you based in Europe? Pretty straight forward
FortiCloud can help with your wireless and security challenges in a number of ways. Our solution addresses common IT difficulties including time-consuming provisioning, high investment costs, complex management, vulnerability to advanced threats, and the need to easily scale with growth.
The platform's reporting and analysis capabilities need improvement.
The only area that requires improvement is the login reports. We aim to integrate it with our local mobile service provider.
The solution’s pricing and stability could be improved.
In our company, we have had some problems with the solution's ACL since it has some rules that don't work correctly. We have grouped some objects under one class, and we use it in ACL, but it still doesn't work correctly. ACL is an area with shortcomings that needs to be improved.
The product is not recommended on the basis of technical parameters. It is very tough to authenticate.
Fortinet should simplify the licensing model. It's too complex for decision-makers to choose from the range of options. Handling the pricing models is a nightmare, so it's difficult to sell the solution.
I would like to see more reporting from the analysis improved in the future.
The console or demonstration tool could be more user friendly. Better marketing is needed to elevate the solution. The solution partners with many vendors but some of them do not want to help or share information that would ensure good integrations. The EDR could use improvement to be more robust and in line with Darktrace.
The solution should include a commit button that allows for review of changes and deployments before they are submitted. Any actions are immediately reflected but it would be better if a review-before-commit option existed like with Palo Alto. The solution could enhance its firewall reporting without the need for a sister product such as Analyzer.
The analysis could be better. We do find we get a bit of a lag. The integration could be better. Beyond that, it is meeting our needs.
So far, it's been serving all the required purposes. We've not seen any areas for improvement. No missing features come to mind right now.
There is room for improvement in their management and downtime. They're constantly doing maintenance and there are unexpected downtimes for the cloud interface. It seems like they are having some growing pains.
GUI access could be improved. It should be simpler to access everything from the portal. Once we log in to the portal, we should be able to access all the Fortinet Cloud options. Onboarding and activating customers in FortiGate Cloud is also tricky. They will come to us asking for help and telling us they can't find the activation. Maybe Fortinet could add something like a wizard that provides step-by-step guidance about what to do next. If I am using this solution for the first time, so I do not know where to click. There should be built-in guided instructions inside the portal itself.
The capacity to execute the solution needs to be improved. I would like to see management and analytics included in the solution.
It would be better for us if Fortinet provided a private cloud, and they should provide more security on the public cloud. There are some minor issues with security with the public cloud. For example, anyone with a link can access the public cloud.
The robustness of the software could be improved.
The licensing is a little bit confusing and needs to be improved. The technical support should be more responsive. I would like to see support for a cloud-based network access control (NAC) platform.
Fortinet FortiGate Cloud could improve the dashboards.
When we're upgrading, it's sometimes quite challenging, especially firmware. We usually don't upgrade unless we have a bug, and we still feel it's not safe to react instead of being proactive. We often have some delays when updating FortiGuard, too. Nevertheless, I believe that it's okay most of the time with proper management. We also run into some problems using FortiGate as a UTM solution. I feel like maybe they're not giving me a full view of the other components that they have in that box. Their box has some DDoS defense, but I need complete DDoS protection. I must not have light DDoS protection on other UTM boxes because if I'm uncertain about the security posture, it will compromise me. We like having everything in one box because running multiple boxes eats up more resources on the computing level. We need a total solution, not half-half.
If the SD-WAN technology were included free of cost then it would be more suitable for many users, including us.
The solution could add load balancing and QS features at an application level. In Fortinet, they don't have application-level visibility as we have in Palo Alto. That is something Fortinet can improve on, the application-level visibility. The SSL visibility could be better. The content which is encrypted, if they can add an encryption engine, which can check the traffic of SCTPS and do the analysis and the threat filtering, or the URL filtering, in the content, that would be ideal. That way, we don't have to purchase another separate product, like Content Peeper, or other products that do dedicated SSL filtering. I'd like application-side reporting, for example, who are the top 10 users, what users are using what. In terms of the complexity, if they integrate and give the track-to reporting to management, that will be a great feature for a future release.
We have found that the antivirus functions are very bad in Fortinet FortiGate Cloud and we don't use the antivirus anymore. Additionally, the FortiADC has bad quality. The solution could improve by having a Russian interface.
We had a problem with external attacks in the previous solution we were using so I'd always like to see additional security around that problem.
The support is not very good and is something they need to work on. I do not find them to be very helpful. As with any IT vendor, there are software issues.
Fortinet could improve FortiGate Cloud by providing better integration with third-party applications and features.
Everything related to the graphical user interface should be improved.
Its price should be better.
I would like to see better integration with other technologies.
I'd like to see some configuration changes. The speed seems to be a little better than it was previously but it could still be improved. I'd also like to see a little more provisioning or training on the different scenarios and functions and features. And obviously the price point; it's a tough market out there these days, so for some of our smaller customers the price is quite steep.
Currently with the solution, if you want to manage more than one FortiGate you have to use a VM, and a VM can control up to 10. You need to have a license for each one and it is confusing. Other solutions like Meraki is much more seamless. Easier usability and improving their WebDewey would benefit also.
The integration could be better on the solution. As it is now, there's definitely room for improvement. The command-line interface could definitely be improved in future iterations. It's lacking right now.
The initial set up could be simplified. When evaluating other solutions, I learned that Sophos for example is able to have the endpoint interact with the firewall. If something goes wrong or if the endpoint is not behaving as it should, it could isolate the endpoint. We need some integration or communication between the endpoint and the firewall. I would also like to have a bundle available that would include things like EDR and endpoint.
Reporting is an area that can be enhanced. It is not always beneficial, and you have to buy an additional license to get the type of reports that you're looking for. There are often releases of the new firmware, which requires upgrades often. This is an inconvenience for customers as they have to have a maintenance window and turn off the internet until the upgrade is complete. In the future, they could integrate with a third-party reporting tool such as Crystal Reports or Power BI, which might be beneficial, as it currently requires an additional license.
When it comes to the overall product, I don't see places for improvement. It's excellent. The cost of the solution is too high. It should be adjusted to be more affordable for companies. Right now, I feel like it's far too much.
The solution should allow users to keep the data for longer than the current periods. I can't get any historic data after more than a month. I would like to be able to, after a year, look for trends from the past 12 months. It would make things much easier.
I would like to see a SIEM bundled together with this because customers are looking into better reporting and more proactive security solutions. In the next release, it would benefit this solution to have more advanced monitoring capabilities such as predictive analysis and reporting.
When you login to Forticloud you get directed to the Global site, even if you are based in Europe and you have to switch manually to the European site which can be confusing when you are not familiar to Forticloud, especially in the beginning and when you want to setup your first device. This should be more like a question when you log in, are you based in the US or are you based in Europe? Pretty straight forward